
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
File: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier: uPrqe+3VY4iMsKPq0O6BgXZ3jDOMsF1P9U++HibeByE=
Subject key identifier: E4:C2:B8:7F:D5:CE:D9:7C:52:6C:F0:8A:E0:C8:C1:56:64:3B:66:EB
Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial: 17403D8F65B28999320CDD2DDA7147749A63649B
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
Signing time: Wed 18 Feb 2026 11:02:37 +0000
ROA not before: Wed 18 Feb 2026 10:57:37 +0000
ROA not after: Wed 17 Feb 2027 11:02:37 +0000
asID: 138855
IP address blocks: 103.170.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:40:3d:8f:65:b2:89:99:32:0c:dd:2d:da:71:47:74:9a:63:64:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Validity
Not Before: Feb 18 10:57:37 2026 GMT
Not After : Feb 17 11:02:37 2027 GMT
Subject: CN=E4C2B87FD5CED97C526CF08AE0C8C156643B66EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:31:cc:c5:81:a9:a5:39:67:7a:21:80:d3:
26:07:21:9a:4f:d3:3a:a7:8e:05:75:19:ff:12:40:
71:f1:28:f0:eb:cb:58:ea:6e:31:38:23:62:b8:7b:
f1:b9:70:6d:0f:49:63:44:d1:82:96:a7:76:3a:02:
36:14:2d:9e:6b:12:0d:38:e1:a4:12:61:df:d4:91:
0c:59:b0:30:f5:f5:86:b5:d9:0e:3c:80:3d:39:a8:
23:b9:62:e0:86:73:8e:f7:6b:e6:11:38:28:c3:4c:
87:ed:27:79:35:46:68:ec:fe:96:16:91:52:11:e0:
1c:53:39:4d:7a:4c:b6:e9:52:6b:06:48:6f:03:89:
52:85:06:2c:a5:b9:71:02:e5:1d:9f:ad:b1:71:0f:
77:0b:52:36:fb:ce:63:6c:11:5b:a0:a1:55:49:36:
10:b9:56:94:94:cb:19:86:b0:12:0f:da:b7:73:67:
ce:6e:15:a4:71:68:df:d3:8b:26:2c:d0:b4:95:8b:
14:d1:8f:74:35:a4:44:8d:67:66:e9:4c:ed:66:3e:
13:ab:99:3c:76:e3:2a:dd:bc:a3:18:08:81:d9:71:
2d:75:3a:d6:e0:c3:91:75:bd:73:2f:32:a0:6d:9f:
ce:ee:52:38:56:38:95:0c:d3:ff:7b:9c:d3:69:af:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:B8:7F:D5:CE:D9:7C:52:6C:F0:8A:E0:C8:C1:56:64:3B:66:EB
X509v3 Authority Key Identifier:
keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.236.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:90:9b:09:e8:a6:05:1e:4c:51:ce:10:ee:fe:59:52:19:15:
3d:ec:9c:48:0b:7f:5c:01:0c:c6:9a:2f:a7:8a:f2:7b:86:01:
bf:6a:62:da:9a:b2:81:9d:87:82:a5:e8:70:24:ca:2d:52:b9:
ad:52:6d:da:75:c8:23:d9:6a:66:ef:19:80:cd:3d:5f:84:c2:
c3:85:91:ee:f1:75:03:d6:fd:ce:a7:73:be:a6:20:04:77:04:
e4:cb:0c:47:80:dc:3b:8d:76:44:ad:20:05:88:49:d6:e8:37:
6d:74:5d:bb:78:39:df:74:1b:d3:1a:05:08:1e:44:62:b3:6f:
ab:11:73:86:e7:90:fc:35:0c:f3:9a:85:97:9e:70:c3:89:58:
00:f4:e8:19:ae:00:07:ec:99:08:50:75:d6:04:96:0b:a0:6d:
a6:6b:4d:70:58:ca:4b:90:41:af:a1:47:65:26:1b:a0:4f:07:
c5:62:75:b0:70:64:27:6c:18:01:e8:a7:b1:4c:d1:86:e8:de:
ee:44:9b:06:f1:7b:80:b2:16:7b:5a:24:55:b4:bf:1e:83:f2:
44:79:8b:3a:e2:e7:53:dd:ba:f3:60:b8:ff:ee:93:f6:85:c5:
67:41:f6:19:59:85:d3:c8:24:d8:3a:3b:64:03:da:18:2c:2b:
00:ce:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:58 2026 by rpki-client